[ previous ] [ next ] [ threads ]
 From:  "Chris Buechler" <cbuechler at gmail dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Re: captive portal and vpn clients
 Date:  Tue, 22 Jan 2008 13:21:07 -0500
On Jan 22, 2008 11:02 AM, Carlos Baiget Orts <carlos dot baiget at uv dot es> wrote:
> Hi Jurgen
> Thanks for your hint,  but I'm not sure of having understood or explained my
> self well.
> I am not having problems on displaying the welcome web page to the clients
> connected to my wifi lan, as I am using the captive portal feature to tell
> clients that they are only allowed to make an vpn to the internet when they
> try to access the internet from their browser. For that goal everything but
> relevant udp/tcp ports are blocked.
> Now I have the problem of clients not being able to perform the vpn
> connection, as the captive portal server seems to intercept all traffic. I
> was guessing if i could show the wellcome web page and still allow clients to
> make vpn connections to the internet.
> As far as I know, with the 'Allow IP adresses' list all I can do is to disable
> showing the captive portal to selected clients, but I want it to be shown to
> all clients connected, if possible.

That's correct, users will have to open their browser and click
through or authenticate to the captive portal before VPN connections
or any other traffic will work. There isn't a way to allow specific
types of traffic and not others.